Insert a user's free-form request into an internal FAQ prompt.
Prevent text in the request from changing system instructions or permissions.
Choose two appropriate controls.
Treat user text as untrusted data, separate it from trusted instructions, validate inputs, and keep authorization outside the model.
Detailed explanation
Untrusted text should not be treated as a trusted command.
Untrusted text should not be treated as a trusted command.
Input policy can reject or isolate unexpected and malicious content.
Input policy can reject or isolate unexpected and malicious content.
Input has no authority and permissions require separate authorization.
Input has no authority and permissions require separate authorization.
Generated output must be checked by trusted server-side controls.
Generated output must be checked by trusted server-side controls.
Try it yourself
An example you can run in a temporary verification environment.
Amazon Bedrock公式のGuardrails・Prompt management・セキュリティ設計を確認する。Expected result
入力とシステム指示の分離、検証、権限分離をプロンプトインジェクション対策として説明できる。Key points
- Trust boundary
- Input validation
- Permission separation
Notes
- Environment: AWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
- Command output formatting can vary slightly by distribution or tool version.
- Run the example in a temporary directory or process when possible.
Foundation review
Read the scope first
Check whether the command acts on the current shell, a new process, an existing process, or a file.
Verify the observable result
Use the supplied command and compare the output with the expected result.